infrastructure /security engineer

• Security Remediation Ownership: Take findings from the backlog through investigation, technical implementation, testing, and formal audit closure.
• Risk-Based Prioritisation: Address urgent vulnerabilities and material security exposures prior to low-priority configuration tweaks.
• Change Management: Prepare clear change requests, conduct impact assessments, arrange necessary approvals, and maintain rollback plans.
• Audit & Compliance Documentation: Record initial findings, remediation actions, test results, evidence artifacts, and any residual risks.
• Reporting & Tracking: Provide structured weekly progress reports covering key milestones, blockers, dependencies, risks, and estimated completion dates.

• Cloud & Identity: Microsoft Azure, Microsoft Entra ID, Azure Storage, Azure Policy, Conditional Access, and enterprise applications.
• Endpoint & Systems Management: Microsoft Defender for Endpoint, Defender Antivirus, Microsoft Intune, and Group Policy (GPO).
• Core Infrastructure & Automation: Windows Server, Active Directory Domain Services (AD DS), DNS, Kerberos, SMB, NTLM, and PowerShell scripting.
• Security & Operations: Mimecast, vulnerability scanners, security incident management, and audit evidence management.

• Expertise in vulnerability and patch management, identity hardening, cloud security posture, and security control implementation.
• Proven ability to independently manage multiple audit findings concurrently while coordinating change approvals and compiling audit evidence.

• Experience with Darktrace, Mimecast, Azure AI governance, or enterprise security audit frameworks.

At Randstad, we are passionate about providing equal employment opportunities and embracing diversity to the benefit of all. We actively encourage applications from any background.